Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersBreeze <= 2.2.21 - Missing Authorization
Brookside <= 1.4 - Reflected Cross-Site Scripting
Orchid Store <= 1.5.15 - Missing Authorization
Flex QR Code Generator <= 1.2.11 - Authenticated (Author+) Stored Cross-Site Scripting
Search & Go <= 2.8 - Unauthenticated Local File Inclusion
JNews - Frontend Submit <= 11.0.0 - Reflected Cross-Site Scripting
Sales Countdown Timer for WooCommerce and WordPress <= 1.1.8.1 - Authenticated (Contributor+) Local File Inclusion
Barberry <= 2.9.9.87 - Unauthenticated Local File Inclusion
xSmart <= 1.2.9.4 - Authenticated (Subscriber+) Privilege Escalation
Drone <= 1.40 - Reflected Cross-Site Scripting
Responsive Addons for Elementor <= 2.0.8 - Missing Authorization
TheNa <= 1.5.5 - Reflected Cross-Site Scripting
UiChemy <= 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Lead Capturing Pages <= 2.5 - Authenticated (Subscriber+) SQL Injection
Ecwid Shopping Cart <= 7.0.6 - Missing Authorization
xPromoter <= 1.3.4 - Reflected Cross-Site Scripting
xSmart <= 1.2.9.4 - Reflected Cross-Site Scripting
AutoParts <= 1.5.8 - Unauthenticated Local File Inclusion
DZS Video Gallery <= 12.39 - Authenticated (Subscriber+) SQL Injection
Electron <= 1.8.2 - Missing Authorization
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
MetForm Pro <= 3.9.8 - Missing Authorization
Melania <= 2.5.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.